Detection of System Checks

Technique Detected:  System Checks | T1633.001

ID: DET0625
Domains: Mobile
Analytics: AN1691, AN1692
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1691

Application vetting services could look for applications attempting to get android.os.SystemProperties or getprop with the runtime exec() commands. This could indicate some level of sandbox evasion, as Google recommends against using system properties within applications.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None

AN1692

Application vetting services could look for applications attempting to get android.os.SystemProperties or getprop with the runtime exec() commands. This could indicate some level of sandbox evasion, as Google recommends against using system properties within applications.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None